Senior Product Security Engineer – Contract

🔥 12 hours ago

🇺🇸 United States – Remote

⏳ Contract/Temporary

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Iru

WebsiteLinkedInAll Job Openings

201 - 500 employees

🔒 Cybersecurity

☁️ SaaS

🤝 B2B

💰 $100M Series D on 2024-08

Cybersecurity • SaaS • B2B

Iru is an AI-powered security platform that unifies identity, endpoint, and compliance controls into a single SaaS solution. It offers passwordless workforce identity, endpoint management, endpoint detection & response (EDR), vulnerability management, and compliance automation driven by its Iru AI and Context Model to provide continuous evidence collection and adaptive controls. Iru is designed for IT and security teams at organizations seeking to replace fragmented tooling with a single, integrated system to secure users, apps, and devices while improving operational efficiency.

📋 Description

• Embed security into the product development lifecycle • Identify security risks early and partner with development teams on remediation • Perform security design and architecture reviews for new products and features • Conduct threat modeling for applications, APIs, and AI-enabled services • Review application security posture throughout the SDLC • Review authentication, authorization, and access control implementations • Perform manual web, API, thick-client, and mobile application penetration testing • Validate findings from third-party penetration tests • Conduct secure code reviews • Verify remediation of security vulnerabilities • Drive adoption of secure coding practices • Help define Product Security standards and engineering guardrails • Develop reusable security patterns and reference architectures • Triage findings from SAST, DAST, SCA, container scanning, and cloud security tools • Track remediation SLAs and security metrics • Assess AI-enabled products for security risks • Review LLM integrations and AI workflows • Test AI applications for prompt injection, data leakage, insecure tool use, model abuse, and authorization weaknesses • Help define secure AI engineering standards • Improve automation of security testing throughout CI/CD • Integrate security tooling into developer workflows • Build scripts and tooling that reduce manual security work • Collaborate with Product, Engineering, Infrastructure, Cloud Security, and Compliance teams • Support customer security questionnaires related to product security • Assist Sales Engineering with security discussions when needed

🎯 Requirements

• 5+ years in Product Security or Application Security • Strong understanding of modern application architectures • Experience securing web applications, APIs, microservices, and cloud-native applications • Experience performing threat modeling • Experience conducting penetration testing • Strong understanding of OWASP Top 10 • Strong understanding of OWASP API Top 10 • Strong understanding of authentication and authorization • Strong understanding of OAuth / OIDC • Strong understanding of Secure SDLC • Experience with SAST, DAST, SCA, and container security • Experience partnering directly with engineering teams • Strong written and verbal communication skills • Experience securing AI/LLM applications preferred • Experience with Kubernetes and containers preferred • Familiarity with cloud security (AWS, Azure, or GCP) preferred • Experience with GitHub Actions or CI/CD security preferred • Experience using Snyk, Burp Suite Pro, Semgrep, Wiz, or GitHub Advanced Security preferred • Security certifications such as OSCP, GWAPT, GWEB, CSSLP, or CISSP are a plus

🏖️ Benefits

• Competitive salary • 100% individual and dependent medical + dental + vision coverage • 401(K) with 4% company match • 20 days PTO • Iru Wellness Week the first week in July • Equity for full-time employees • Up to 16 weeks of paid leave for new parents • Paid Family and Medical Leave • Exciting opportunities for career growth